last executing test programs: 4.01639748s ago: executing program 4 (id=6468): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) 3.793970948s ago: executing program 4 (id=6473): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 3.494808412s ago: executing program 4 (id=6478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.298684639s ago: executing program 4 (id=6483): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 3.04360535s ago: executing program 4 (id=6498): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 2.739722265s ago: executing program 4 (id=6493): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f0000000000)={[{@noacl}, {@skip_balance}, {@subvol={'subvol', 0x3d, '&\x19!\xe9:\xe4{\x9f\t\x14\xb4\xac\x86)\xc0[\xf7gZQJ\x90\x0f081\xab6\xcb\xe5\x87\xd8 \xd4\x1a^\xeb\'\xbc\v\xa3\x92\xfc\x02\xdd6P\x14$_m\xaf}\xd6f`33N{\x95V\x18\x85\x99%\xae\xc6\x05x\x12|\xbcF\x96 #\r\xe2\xae\x18\x8a\xe2W\x15\x06\x87\x8d\xce\x81r(+q\x16\xd8s\xab\xc2\x11\xad4\x0f\x93yTc\xd3\xc9~P\x8d\xff\x8d%}\'\xf89\xef\xa7^z\xc2\xbcx\xc2\b\xc4\xb2\xfehS&\x00\x1c\xc2\xcf\xa8E\\\xc7xq\a\xbb\x1cI\n\xa1o\xf4\xab\xc6\xd2\xe0\xf0C\xff*\xfb\xb5\x1d\x81\xd0-\xa1\x8di\xb7f(`\xb1\xeb\x9b\x8f,\x10\xe0\"C\x12\x85\xeb*\x17\xf4\x8bh\xec4\x85\x95\xb3\xb5\xa6\xfba0.\x05\x14\xdfb\x80 \xbd\xa8\x14g3Q~zl\xf1?\x9e'}}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x31, 0x39]}}, {@noflushoncommit}, {@ssd_spread}, {@fragment_data}], [{@audit}]}, 0x1, 0x5605, &(0x7f000000ac40)="$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") 1.570474871s ago: executing program 2 (id=6526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 1.357549508s ago: executing program 2 (id=6529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 1.110837038s ago: executing program 2 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newroute={0x38, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}}, 0x0) 979.085869ms ago: executing program 2 (id=6536): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x2}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 829.391361ms ago: executing program 0 (id=6539): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x0, 0x47425247}) 826.798922ms ago: executing program 2 (id=6540): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x194, 0x30, 0x48b, 0x0, 0x0, {}, [{0x180, 0x1, [@m_nat={0x17c, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @empty, @multicast1}}]}, {0xfffffffffffffd47, 0x6, "d2a87788198db8c73238d65caf6be66dad5985c719201359b0a1aa32f93a74bbc2b8a11676d9ff6b0c1308f57d5b8ab0d9afec98e98fa70d32d8f9ec0812c826120dfd1336582f0099a65f52359af8d9e6e2034636583f0b6e88e6ca3b34342dd7bfdd25358af0fef8f4d16f8c2856707ada84ae458f76111d91f606918871587b4ff8b9ff9b33f4a896e87ad0bf6120ad076406408861e6f36ed4d3ebac29aa075bfc8c36a91bfb87894a54a807b6f71dad4d5c94e7eae1d3c4a8d4c6d766c478deca3d194f65c542b470e52297afbd128f7413a59120db982f9b264c8d685aa04e1ade7b3be0a2e0ffb81695c730cbd6c53311d677e43b42d9e43f23338de63419fd64053b824dda8d7e9a8bf6090bf2aa65f5011badfe9a387531b574b25051c497bd474a49"}, {0xc}, {0xc}}}]}]}, 0x194}}, 0x0) 747.288099ms ago: executing program 1 (id=6542): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffaecd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012280001000d080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 636.590558ms ago: executing program 0 (id=6543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 635.466738ms ago: executing program 1 (id=6544): r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000140), 0xa001, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f00000001c0)='^', 0x1}], 0x1, 0x13a, 0x0) 616.485659ms ago: executing program 3 (id=6545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@can_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_FILTER={0xc}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "967bd033807ac2ab"}, 0x7}}]}, 0x38}}, 0x0) 605.53924ms ago: executing program 2 (id=6546): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$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") unlink(&(0x7f0000000300)='./file1\x00') 523.359367ms ago: executing program 1 (id=6547): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0xc, {0x2, 0x0, @remote}}, 0x24) 512.263298ms ago: executing program 3 (id=6548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@dellinkprop={0x28, 0x6d, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 511.727048ms ago: executing program 0 (id=6549): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) 395.253777ms ago: executing program 3 (id=6550): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000240)={0x0, 0xc7e2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 385.613208ms ago: executing program 1 (id=6551): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) 385.125928ms ago: executing program 0 (id=6552): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x40, 0x0, 0xfffff03c}, {0x6, 0x0, 0x0, 0x401}]}, 0x10) 238.58525ms ago: executing program 3 (id=6553): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x7, 0x0) 238.46442ms ago: executing program 1 (id=6554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/103, 0x67}], 0x1) 238.36171ms ago: executing program 0 (id=6555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0xffffffffffffffff) 134.017359ms ago: executing program 3 (id=6556): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) 122.04673ms ago: executing program 1 (id=6557): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 648.31µs ago: executing program 0 (id=6558): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000200)=@s={0x5, @generic}) 0s ago: executing program 3 (id=6559): syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x38, 0xd0, 0x8e, 0x20, 0x1164, 0x602, 0x1e0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x4d, 0xc, 0xe7}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): . [ 561.826448][ T21] r8152-cfgselector 3-1: config 0 descriptor?? [ 561.999888][T15719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.120218][ T1074] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 562.120258][ T1074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.120282][ T1074] usb 1-1: Product: syz [ 562.120300][ T1074] usb 1-1: Manufacturer: syz [ 562.120317][ T1074] usb 1-1: SerialNumber: syz [ 562.136558][T15719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.142105][ T21] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 562.163744][ T1074] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 562.168361][ T1185] usb 3-1: config 0 descriptor?? [ 562.346488][T15719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 562.366996][T15719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 562.378278][ T5397] usb 3-1: USB disconnect, device number 120 [ 562.380746][T15719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 562.391372][T15719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.399145][ T1185] usb 3-1: can't set config #0, error -71 [ 562.478533][T15830] loop1: detected capacity change from 0 to 512 [ 562.618079][T15719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.634139][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 562.642571][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 562.667253][T15719] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.698225][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.707125][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.726621][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.733777][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.752932][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 562.769511][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.785615][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.809596][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.816771][ T5397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.826260][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 562.835922][T15830] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 562.867572][T15830] ext4 filesystem being mounted at /1016/file0 supports timestamps until 2038 (0x7fffffff) [ 562.882099][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 562.893456][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 562.902148][ T1074] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 562.916193][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.928485][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 562.937617][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.946739][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 562.955778][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.969846][T15719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.987123][T15719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 562.997079][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 563.005994][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 563.023008][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 563.071572][ T3646] Bluetooth: hci6: command 0x041b tx timeout [ 563.179730][T15848] loop3: detected capacity change from 0 to 64 [ 563.324924][T15719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.376484][ T3646] usb 1-1: USB disconnect, device number 122 [ 563.396576][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 563.406901][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.830610][ T5402] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 563.933243][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.949455][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 564.022945][ T1074] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 564.030040][ T1074] ath9k_htc: Failed to initialize the device [ 564.059411][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 564.069111][ T3646] usb 1-1: ath9k_htc: USB layer deinitialized [ 564.087908][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 564.108022][T15719] device veth0_vlan entered promiscuous mode [ 564.131052][T15889] netlink: 494 bytes leftover after parsing attributes in process `syz.3.4904'. [ 564.147841][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.173837][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.200881][T15719] device veth1_vlan entered promiscuous mode [ 564.266951][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 564.286675][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 564.323848][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 564.348145][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.369633][T15903] (unnamed net_device) (uninitialized): option use_carrier: invalid value (3) [ 564.435609][T15719] device veth0_macvtap entered promiscuous mode [ 564.461596][ T5402] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 564.490115][ T5402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.521842][T15719] device veth1_macvtap entered promiscuous mode [ 564.547153][ T5402] usb 2-1: Product: syz [ 564.551554][ T5402] usb 2-1: Manufacturer: syz [ 564.588721][ T5402] usb 2-1: SerialNumber: syz [ 564.614303][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.663992][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.676196][ T5402] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 564.685755][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.718063][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4916'. [ 564.752229][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.782164][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4916'. [ 564.801980][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.825206][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4916'. [ 564.834850][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.845307][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.867509][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.891824][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.919800][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.939846][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.960558][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.987937][T15719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.006104][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 565.021674][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 565.058763][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 565.077364][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 565.111839][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.156139][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.216113][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.237745][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.277127][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.297065][ T4248] Bluetooth: hci6: command 0x040f tx timeout [ 565.308911][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.331176][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.353526][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.374497][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.398406][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.412694][T15252] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 565.413194][ T5402] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.427628][T15719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.454327][T15719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.480531][T15719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.502013][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 565.514867][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.536713][T15929] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 565.576129][T15719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.614283][T15719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.656959][T15719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.679990][T15719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.690855][T15252] usb 4-1: Using ep0 maxpacket: 8 [ 565.843137][T15252] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 565.875094][T15252] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 565.905712][ T5399] usb 2-1: USB disconnect, device number 119 [ 565.926574][T15252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.961785][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.974638][T15252] usb 4-1: config 0 has no interface number 0 [ 565.976694][T15937] loop2: detected capacity change from 0 to 64 [ 565.993705][T15252] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 40 [ 566.000775][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.025861][T15252] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 566.056067][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 566.059000][T15252] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 566.115952][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.130516][T15252] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.147623][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.179612][T15252] usb 4-1: config 0 interface 188 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 566.240141][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 566.326788][T15939] netlink: 'syz.2.4928': attribute type 11 has an invalid length. [ 566.368416][T15939] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4928'. [ 566.417993][T15252] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a2, bcdDevice=63.2d [ 566.427114][T15252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.452243][T15252] usb 4-1: Product: syz [ 566.456452][T15252] usb 4-1: Manufacturer: syz [ 566.467610][T15252] usb 4-1: SerialNumber: syz [ 566.494539][T15252] usb 4-1: config 0 descriptor?? [ 566.507056][T15941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 566.556942][T15923] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 566.575945][T15944] loop2: detected capacity change from 0 to 256 [ 566.592085][ T5402] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 566.599224][ T5402] ath9k_htc: Failed to initialize the device [ 566.631897][ T5399] usb 2-1: ath9k_htc: USB layer deinitialized [ 566.656973][T15944] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 566.705544][T15944] exFAT-fs (loop2): failed to load upcase table [ 566.734043][T15944] exFAT-fs (loop2): failed to recognize exfat type [ 567.009702][T15252] usb 4-1: USB disconnect, device number 121 [ 567.032029][T15960] loop1: detected capacity change from 0 to 64 [ 567.519451][T15252] Bluetooth: hci6: command 0x0419 tx timeout [ 567.547401][T15976] loop2: detected capacity change from 0 to 1024 [ 567.645681][T15979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.653852][T15979] IPv6: NLM_F_CREATE should be set when creating new route [ 567.661162][T15979] IPv6: NLM_F_CREATE should be set when creating new route [ 567.737975][T15976] hfsplus: Filesystem is marked locked, mounting read-only. [ 567.787960][T15976] hfsplus: filesystem is marked locked, leaving read-only. [ 567.977557][T15993] loop3: detected capacity change from 0 to 2048 [ 568.049481][T15987] loop1: detected capacity change from 0 to 8192 [ 568.140070][T15987] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 568.171324][T15993] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 568.222830][T15987] REISERFS (device loop1): using ordered data mode [ 568.230046][T15987] reiserfs: using flush barriers [ 568.235764][T16004] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 568.265405][T15987] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 568.321475][T16010] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.344512][T15987] REISERFS (device loop1): checking transaction log (loop1) [ 568.394148][T15987] REISERFS (device loop1): Using r5 hash to sort names [ 568.409427][T16013] x_tables: unsorted underflow at hook 2 [ 568.487116][T16004] CIFS mount error: No usable UNC path provided in device string! [ 568.487116][T16004] [ 568.541427][T16004] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.062042][T16025] loop3: detected capacity change from 0 to 1764 [ 570.034238][T16060] loop1: detected capacity change from 0 to 1024 [ 570.083181][T16009] loop2: detected capacity change from 0 to 32768 [ 570.171433][T16009] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 570.196678][T16009] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 570.219809][T16060] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc=0x0000000000000004,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,i_version,usrquota,data_err=ignore,data_err=abort,,errors=continue. Quota mode: writeback. [ 570.257594][T16009] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 570.267832][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 570.274665][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 570.460396][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 173ms [ 570.468126][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 570.492973][T16009] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 570.911548][T16085] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 570.964543][T16085] vhci_hcd: invalid port number 9 [ 570.993453][T16085] vhci_hcd: invalid port number 9 [ 571.359773][T16108] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 571.404301][T16108] overlayfs: missing 'lowerdir' [ 571.591905][ T5399] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 571.645806][T16116] loop2: detected capacity change from 0 to 1764 [ 571.740540][T16116] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 572.041153][ T5399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.179976][ T4692] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 572.233652][ T5399] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 572.242780][ T5399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.268065][ T5399] usb 2-1: Product: syz [ 572.307291][ T5399] usb 2-1: Manufacturer: syz [ 572.322306][ T5399] usb 2-1: SerialNumber: syz [ 572.351857][ T5399] usb 2-1: config 0 descriptor?? [ 572.412404][T16078] loop3: detected capacity change from 0 to 32768 [ 572.436748][T16140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.575641][ T4692] usb 3-1: config 0 has an invalid interface number: 223 but max is 0 [ 572.600048][ T4692] usb 3-1: config 0 has no interface number 0 [ 572.652842][ T5399] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 572.695299][ T4059] udevd[4059]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.789513][ T4692] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 572.802773][ T4692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.849023][ T4692] usb 3-1: Product: syz [ 572.853246][ T4692] usb 3-1: Manufacturer: syz [ 572.862685][ T4692] usb 3-1: SerialNumber: syz [ 572.881516][ T4692] usb 3-1: config 0 descriptor?? [ 572.894449][ T21] usb 2-1: USB disconnect, device number 120 [ 572.937375][ T4692] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.223/input/input45 [ 573.110087][ T5399] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 573.164005][ T3011] bcm5974 3-1:0.223: could not read from device [ 573.185949][ T4692] usb 3-1: USB disconnect, device number 121 [ 573.206375][ T3011] bcm5974 3-1:0.223: could not read from device [ 573.360202][T16154] loop3: detected capacity change from 0 to 8 [ 573.442656][T16154] SQUASHFS error: zlib decompression failed, data probably corrupt [ 573.482055][T16154] SQUASHFS error: Failed to read block 0x9b: -5 [ 573.494998][T16154] SQUASHFS error: Unable to read metadata cache entry [99] [ 573.536747][T16154] SQUASHFS error: Unable to read inode 0x127 [ 573.553180][ T5399] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 573.572594][ T5399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.601069][ T5399] usb 1-1: config 0 descriptor?? [ 573.778502][T16161] tmpfs: Bad value for 'mpol' [ 573.881891][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5034'. [ 574.041891][T16172] x_tables: duplicate entry at hook 2 [ 574.169187][ T5399] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 574.176418][ T5399] hackrf 1-1:0.0: Could not detect board [ 574.235586][ T5399] hackrf: probe of 1-1:0.0 failed with error -71 [ 574.270802][ T5399] usb 1-1: USB disconnect, device number 123 [ 574.297010][T16184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5043'. [ 574.536672][T16194] loop2: detected capacity change from 0 to 512 [ 574.773498][T16194] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #3: comm syz.2.5047: corrupted inode contents [ 574.856552][T16194] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #3: comm syz.2.5047: mark_inode_dirty error [ 574.879945][T16194] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #3: comm syz.2.5047: corrupted inode contents [ 574.916708][T16194] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.5047: mark_inode_dirty error [ 574.958369][T16194] __quota_error: 6 callbacks suppressed [ 574.958388][T16194] Quota error (device loop2): write_blk: dquota write failed [ 574.989329][T16194] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 575.020266][T16194] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.5047: Failed to acquire dquot type 0 [ 575.086509][T16194] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #16: comm syz.2.5047: corrupted inode contents [ 575.110326][T16194] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #16: comm syz.2.5047: mark_inode_dirty error [ 575.145409][T16194] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #16: comm syz.2.5047: corrupted inode contents [ 575.191707][T16194] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.5047: mark_inode_dirty error [ 575.229331][T16194] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #16: comm syz.2.5047: corrupted inode contents [ 575.269256][T16194] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 575.300528][T16194] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #16: comm syz.2.5047: corrupted inode contents [ 575.313304][T16168] loop3: detected capacity change from 0 to 40427 [ 575.335024][T16194] EXT4-fs error (device loop2): ext4_truncate:4261: inode #16: comm syz.2.5047: mark_inode_dirty error [ 575.365318][T16194] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 575.408654][T16168] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 575.416437][T16168] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 575.425901][T16194] EXT4-fs (loop2): 1 truncate cleaned up [ 575.434435][T16194] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 575.468277][T16194] ext4 filesystem being mounted at /1041/file1 supports timestamps until 2038 (0x7fffffff) [ 575.496864][T16168] F2FS-fs (loop3): invalid crc value [ 575.604742][T16168] F2FS-fs (loop3): Found nat_bits in checkpoint [ 575.612342][T16194] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #12: block 13: comm syz.2.5047: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 575.763704][T16168] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 575.770791][T16168] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 575.789906][T16222] overlayfs: unrecognized mount option "fsname=/$\+" or missing value [ 575.872014][T16168] attempt to access beyond end of device [ 575.872014][T16168] loop3: rw=2049, want=45104, limit=40427 [ 576.038568][T16193] loop1: detected capacity change from 0 to 32768 [ 576.119879][T16193] gfs2: fsid=#.!%.'\': Trying to join cluster "lock_nolock", "#.!%.'\'" [ 576.156866][T16193] gfs2: fsid=#.!%.'\': Now mounting FS (format 1801)... [ 576.216297][T16193] gfs2: fsid=#.!%.'\'.s: journal 0 mapped with 18 extents in 0ms [ 576.509931][T16193] gfs2: fsid=#.!%.'\'.s: first mount done, others may mount [ 576.602166][T16246] netlink: 'syz.2.5070': attribute type 1 has an invalid length. [ 576.627147][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5070'. [ 576.756440][T16250] loop2: detected capacity change from 0 to 256 [ 576.787698][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5074'. [ 577.403460][T16289] loop2: detected capacity change from 0 to 16 [ 577.445954][T16289] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 577.497705][T16289] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version [ 577.533107][T16294] netlink: 'syz.4.5092': attribute type 4 has an invalid length. [ 577.824592][ T21] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 578.102480][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 578.263225][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.285594][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.329127][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 578.359546][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.373424][T16282] loop1: detected capacity change from 0 to 32768 [ 578.393131][ T21] usb 1-1: config 0 descriptor?? [ 578.445863][ T21] hub 1-1:0.0: USB hub found [ 578.461114][T16290] loop3: detected capacity change from 0 to 32768 [ 578.512739][T16282] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5086 (16282) [ 578.604042][T16282] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 578.614112][T16282] BTRFS info (device loop1): using free space tree [ 578.635720][T16290] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.5090 (16290) [ 578.653627][T16282] BTRFS info (device loop1): has skinny extents [ 578.669536][ T21] hub 1-1:0.0: 1 port detected [ 578.957756][ T21] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 578.964144][ T21] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 579.071726][T16344] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5112'. [ 579.152482][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 579.158509][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 579.204902][ T21] usb 1-1: USB disconnect, device number 124 [ 579.300329][T16282] BTRFS info (device loop1): enabling ssd optimizations [ 580.063357][T16383] loop1: detected capacity change from 0 to 2048 [ 580.194304][T16383] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 580.227679][T16383] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 580.315499][T16383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.659860][T16428] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5146'. [ 580.688206][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5148'. [ 580.718977][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5148'. [ 580.722596][T16433] cgroup: name respecified [ 580.879959][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5153'. [ 581.268959][T16471] binder: 16468:16471 ioctl c018620c 20000380 returned -22 [ 581.300318][T16474] usb usb8: usbfs: process 16474 (syz.2.5168) did not claim interface 0 before use [ 581.690611][T16502] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 581.901563][T16512] loop2: detected capacity change from 0 to 2048 [ 581.964304][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5191'. [ 581.981302][T16524] loop1: detected capacity change from 0 to 512 [ 582.045209][T16512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.131329][T16524] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 582.145291][T16524] UDF-fs: Scanning with blocksize 512 failed [ 582.165127][T16524] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 582.185324][T16524] UDF-fs: Scanning with blocksize 1024 failed [ 582.219408][T16524] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 582.226914][T16524] UDF-fs: Scanning with blocksize 2048 failed [ 582.292240][T16524] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 582.326029][T16524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.806330][ T3616] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 582.950628][T16579] loop3: detected capacity change from 0 to 8 [ 583.084883][ T3616] usb 1-1: Using ep0 maxpacket: 16 [ 583.105837][ T5401] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 583.228469][ T3616] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 583.268733][ T3616] usb 1-1: config 0 has no interface number 0 [ 583.305892][ T3616] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 583.343459][ T3616] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 583.507701][ T5401] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 583.533521][ T3616] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 583.542616][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 583.554979][ T5401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.579251][ T3616] usb 1-1: Product: syz [ 583.596865][ T5401] usb 3-1: config 0 descriptor?? [ 583.618793][ T3616] usb 1-1: SerialNumber: syz [ 583.631237][ T3616] usb 1-1: config 0 descriptor?? [ 583.662805][ T5401] cp210x 3-1:0.0: cp210x converter detected [ 583.689363][T16589] loop1: detected capacity change from 0 to 128 [ 583.719109][ T3616] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 583.799580][T16593] Invalid ELF header magic: != ELF [ 583.838650][T16589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 583.900103][ T5401] usb 3-1: cp210x converter now attached to ttyUSB0 [ 583.913062][T16589] ext4 filesystem being mounted at /1065/mnt supports timestamps until 2038 (0x7fffffff) [ 583.997370][ T5401] usb 1-1: USB disconnect, device number 125 [ 584.123542][ T3616] usb 3-1: USB disconnect, device number 122 [ 584.133487][ T3616] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 584.185021][ T3616] cp210x 3-1:0.0: device disconnected [ 584.230216][T16603] netlink: 'syz.3.5230': attribute type 5 has an invalid length. [ 584.288512][T16605] loop1: detected capacity change from 0 to 128 [ 584.394670][T16605] FAT-fs (loop1): bogus number of reserved sectors [ 584.406574][T16605] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 584.437371][T16605] FAT-fs (loop1): Can't find a valid FAT filesystem [ 584.566583][T16605] loop1: detected capacity change from 0 to 16 [ 584.585344][T16605] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 584.646677][T16617] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 584.678426][T16617] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 584.785498][T16623] loop2: detected capacity change from 0 to 256 [ 585.100996][T16645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5251'. [ 585.154378][T16651] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 585.175815][T16652] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5253'. [ 585.286792][T16659] loop1: detected capacity change from 0 to 8 [ 585.466238][T16671] ipt_CLUSTERIP: unknown mode 1850529072 [ 585.631571][ T5401] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 585.768796][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5273'. [ 586.038584][T16704] sock: sock_timestamping_bind_phc: sock not bind to device [ 586.270487][ T5401] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=79.8a [ 586.290478][ T5401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.340695][ T5401] usb 3-1: Product: syz [ 586.366315][ T5401] usb 3-1: Manufacturer: syz [ 586.379087][ T5401] usb 3-1: SerialNumber: syz [ 586.457086][ T5401] usb 3-1: config 0 descriptor?? [ 586.479584][T16710] netlink: 'syz.4.5282': attribute type 2 has an invalid length. [ 586.500661][ T5401] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 586.541393][T16710] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5282'. [ 586.738347][ T5401] usb 3-1: qt2_attach - failed to power on unit: -71 [ 586.742171][T16679] loop3: detected capacity change from 0 to 32768 [ 586.757373][ T5401] quatech2: probe of 3-1:0.0 failed with error -71 [ 586.778488][ T5401] usb 3-1: USB disconnect, device number 123 [ 586.796551][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5283'. [ 586.912027][T16679] XFS (loop3): Mounting V5 Filesystem [ 587.056488][T16706] loop1: detected capacity change from 0 to 32768 [ 587.083556][T16722] netlink: 'syz.4.5284': attribute type 1 has an invalid length. [ 587.112274][T16722] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5284'. [ 587.214336][T16706] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 587.214336][T16706] [ 587.243845][T16679] XFS (loop3): Ending clean mount [ 587.249203][T16706] xtLookup: xtSearch returned -5 [ 587.259215][T16706] read_mapping_page failed! [ 587.291714][T16706] jfs_mount: diMount(ipaimap2) failed, rc = -5 [ 587.316546][T16706] Mount JFS Failure: -5 [ 587.328929][T16706] jfs_mount failed w/return code = -5 [ 587.340984][T16726] netlink: 476 bytes leftover after parsing attributes in process `syz.2.5286'. [ 587.389138][ T3579] XFS (loop3): Unmounting Filesystem [ 587.522498][T16732] Option ' ' to dns_resolver key: bad/missing value [ 587.600360][T16734] loop2: detected capacity change from 0 to 512 [ 587.726643][T16734] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 587.865567][T16734] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.5292: corrupted in-inode xattr [ 587.879331][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.885761][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.989702][T16734] EXT4-fs (loop2): Remounting filesystem read-only [ 588.020185][T16749] tmpfs: Bad value for 'mpol' [ 588.023713][T16734] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5292: couldn't read orphan inode 15 (err -117) [ 588.072976][T16734] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery,. Quota mode: none. [ 588.329802][T16763] sctp: [Deprecated]: syz.4.5302 (pid 16763) Use of int in maxseg socket option. [ 588.329802][T16763] Use struct sctp_assoc_value instead [ 588.408420][T16770] tmpfs: Bad value for 'mpol' [ 588.961845][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'. [ 588.971107][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5329'. [ 589.020321][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5329'. [ 589.028068][T16817] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5330'. [ 589.239058][T16833] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 589.383832][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5343'. [ 589.480091][T16851] netlink: 393 bytes leftover after parsing attributes in process `syz.3.5348'. [ 589.766294][T16868] loop1: detected capacity change from 0 to 512 [ 589.775678][T16872] loop3: detected capacity change from 0 to 256 [ 589.778391][T16870] netlink: 'syz.2.5357': attribute type 1 has an invalid length. [ 589.908341][T16868] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5356: bad orphan inode 8323072 [ 589.948233][T16868] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 589.990719][T16868] ext4 filesystem being mounted at /1093/file0 supports timestamps until 2038 (0x7fffffff) [ 590.097905][T16885] binder: Bad value for 'stats' [ 590.194062][T16887] libceph: resolve '4..' (ret=-3): failed [ 590.213308][T16890] netlink: 'syz.4.5365': attribute type 12 has an invalid length. [ 590.267309][T16890] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 590.492910][ T3646] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 590.770883][ T3646] usb 3-1: Using ep0 maxpacket: 8 [ 590.899592][ T3646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.091765][ T3646] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 591.111208][ T3646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.131221][ T3646] usb 3-1: Product: syz [ 591.144188][ T3646] usb 3-1: Manufacturer: syz [ 591.180801][ T3646] usb 3-1: SerialNumber: syz [ 591.200285][ T3646] usb 3-1: config 0 descriptor?? [ 591.243564][ T3646] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 591.292435][ T3646] usb 3-1: selecting invalid altsetting 1 [ 591.678750][T16907] loop3: detected capacity change from 0 to 32768 [ 591.697702][ T3646] usb 3-1: USB disconnect, device number 124 [ 591.706122][ T4692] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 591.763625][T16930] binder: 16929:16930 ioctl c018620c 200013c0 returned -22 [ 591.851534][ T3616] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 591.923024][T16907] XFS (loop3): Mounting V5 Filesystem [ 591.979273][ T4692] usb 2-1: Using ep0 maxpacket: 32 [ 592.073492][T16907] XFS (loop3): Ending clean mount [ 592.107333][ T4692] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 592.151304][ T3579] XFS (loop3): Unmounting Filesystem [ 592.160724][ T3616] usb 5-1: Using ep0 maxpacket: 16 [ 592.310666][ T4692] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=fa.e4 [ 592.319798][ T4692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.321103][ T3616] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 592.347847][ T4692] usb 2-1: Product: syz [ 592.353241][ T4692] usb 2-1: Manufacturer: syz [ 592.357876][ T4692] usb 2-1: SerialNumber: syz [ 592.436267][ T4692] usb 2-1: config 0 descriptor?? [ 592.505575][ T4692] yurex 2-1:0.0: Could not find endpoints [ 592.520984][T16956] __nla_validate_parse: 2 callbacks suppressed [ 592.521003][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 592.588932][ T3616] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 592.619678][ T3616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.652109][ T3616] usb 5-1: Product: syz [ 592.662903][ T3616] usb 5-1: Manufacturer: syz [ 592.685170][ T3616] usb 5-1: SerialNumber: syz [ 592.722737][ T5400] usb 2-1: USB disconnect, device number 121 [ 592.754159][ T3616] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input47 [ 593.085530][ T3011] bcm5974 5-1:1.0: could not read from device [ 593.104230][ T3616] usb 5-1: USB disconnect, device number 117 [ 593.265318][T16990] dlm: non-version read from control device 36 [ 593.507227][T17002] loop3: detected capacity change from 0 to 512 [ 593.732306][T17002] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 593.817659][T17002] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5416: invalid indirect mapped block 2683928664 (level 1) [ 593.895636][T17002] EXT4-fs (loop3): 1 truncate cleaned up [ 593.901647][T17002] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=coup.contrs,errors=continue. Quota mode: writeback. [ 594.295323][T17040] netlink: 'syz.2.5434': attribute type 4 has an invalid length. [ 594.333494][T17040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5434'. [ 594.387669][T17040] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 594.524186][T16992] loop1: detected capacity change from 0 to 32768 [ 594.632423][T16992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5411 (16992) [ 594.739487][T16992] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 594.766310][T17052] loop2: detected capacity change from 0 to 4096 [ 594.785519][T16992] BTRFS info (device loop1): using free space tree [ 594.822530][T16992] BTRFS info (device loop1): has skinny extents [ 594.843679][T17062] cgroup: name respecified [ 594.892637][T17052] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 594.985484][T17052] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 595.119156][T16992] BTRFS info (device loop1): enabling ssd optimizations [ 595.134877][ T3574] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 596.209346][T17056] loop3: detected capacity change from 0 to 32768 [ 596.270459][T17109] loop2: detected capacity change from 0 to 4096 [ 596.314382][T17056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5442 (17056) [ 596.421764][T17056] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 596.472700][T17117] netlink: 'syz.1.5462': attribute type 1 has an invalid length. [ 596.480290][T17056] BTRFS info (device loop3): using free space tree [ 596.486973][T17056] BTRFS info (device loop3): has skinny extents [ 596.821801][T17056] BTRFS info (device loop3): enabling ssd optimizations [ 597.158152][T17150] loop2: detected capacity change from 0 to 64 [ 597.254088][T17152] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 597.563024][T17161] loop2: detected capacity change from 0 to 1024 [ 597.648540][T17161] EXT4-fs (loop2): Ignoring removed oldalloc option [ 597.677102][T17161] EXT4-fs (loop2): Ignoring removed orlov option [ 597.683480][T17161] EXT4-fs (loop2): Ignoring removed orlov option [ 597.751858][ T8971] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 597.784886][T17161] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,oldalloc,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,orlov,orlov,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue. Quota mode: writeback. [ 597.830087][T17179] usb usb8: usbfs: process 17179 (syz.4.5482) did not claim interface 5 before use [ 598.023666][ T8971] usb 1-1: Using ep0 maxpacket: 32 [ 598.147545][ T8971] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 598.156635][ T8971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.227852][ T8971] usb 1-1: config 0 descriptor?? [ 598.265699][T17194] netlink: 'syz.3.5500': attribute type 1 has an invalid length. [ 598.288018][ T8971] cx82310_eth: probe of 1-1:0.0 failed with error -22 [ 598.295952][ T8971] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 598.473578][T17199] loop1: detected capacity change from 0 to 4096 [ 598.510972][ T8971] usb 1-1: USB disconnect, device number 126 [ 598.589729][T17199] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 598.642320][T17199] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 598.657464][T17210] loop3: detected capacity change from 0 to 1024 [ 598.840514][ T3568] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 599.203413][T17202] loop2: detected capacity change from 0 to 32768 [ 599.296408][T17202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5493 (17202) [ 599.369586][T17202] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 599.613513][T17202] BTRFS info (device loop2): using free space tree [ 599.620083][T17202] BTRFS info (device loop2): has skinny extents [ 599.627479][T17241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5513'. [ 599.644461][T17241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5513'. [ 599.968113][T17202] BTRFS info (device loop2): enabling ssd optimizations [ 600.383786][T17277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5518'. [ 601.012638][ T13] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 601.261898][T17300] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5530'. [ 601.271178][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 601.355375][T17272] loop1: detected capacity change from 0 to 32768 [ 601.611628][ T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 601.622430][T17272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5517 (17272) [ 601.739867][T17272] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 601.764144][T17272] BTRFS info (device loop1): using free space tree [ 601.782190][T17272] BTRFS info (device loop1): has skinny extents [ 601.814598][ T13] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=fa.e4 [ 601.834841][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.871262][ T13] usb 4-1: Product: syz [ 601.875485][ T13] usb 4-1: Manufacturer: syz [ 601.913116][ T13] usb 4-1: SerialNumber: syz [ 601.938545][ T13] usb 4-1: config 0 descriptor?? [ 601.978111][ T5397] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 601.987501][ T13] yurex 4-1:0.0: Could not find endpoints [ 602.142059][T17272] BTRFS info (device loop1): enabling ssd optimizations [ 602.243594][ T5400] usb 4-1: USB disconnect, device number 122 [ 602.470615][ T5397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 602.482590][ T5397] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 602.493455][ T5397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 602.504366][ T5397] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 602.514922][ T5397] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 602.526149][ T5397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.537055][ T5397] usb 3-1: config 0 descriptor?? [ 602.675489][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5548'. [ 602.854000][ T5397] hdpvr 3-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL [ 603.075926][ T5397] hdpvr 3-1:0.0: device init failed [ 603.081229][ T5397] hdpvr: probe of 3-1:0.0 failed with error -12 [ 603.110821][ T5397] usb 3-1: USB disconnect, device number 125 [ 603.679544][T17383] loop1: detected capacity change from 0 to 16 [ 603.717872][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5571'. [ 603.737445][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5571'. [ 603.911625][T17383] erofs: (device loop1): mounted with root inode @ nid 36. [ 603.936782][T17383] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 603.938194][T17398] loop3: detected capacity change from 0 to 512 [ 604.025867][T17383] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -38 in[52, 4044] out[1851] [ 604.076019][T17383] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 604.087027][T17398] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 604.138995][T17398] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.5570: bad orphan inode 15 [ 604.232091][T17398] ext4_test_bit(bit=14, block=4) = 1 [ 604.237633][T17398] is_bad_inode(inode)=0 [ 604.243575][T17398] NEXT_ORPHAN(inode)=0 [ 604.247663][T17398] max_ino=32 [ 604.250864][T17398] i_nlink=1 [ 604.254218][T17398] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,jqfmt=vfsold,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 604.516278][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5579'. [ 604.536463][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5579'. [ 604.551028][ T13] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 604.590270][T17427] loop2: detected capacity change from 0 to 8 [ 604.938983][T17441] loop2: detected capacity change from 0 to 256 [ 604.978948][ T13] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 605.008965][ T13] usb 1-1: config 0 has no interface number 0 [ 605.192714][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28 [ 605.223521][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.243275][T17450] loop1: detected capacity change from 0 to 1024 [ 605.260683][ T13] usb 1-1: Product: syz [ 605.267860][ T13] usb 1-1: Manufacturer: syz [ 605.288792][ T13] usb 1-1: SerialNumber: syz [ 605.311118][ T13] usb 1-1: config 0 descriptor?? [ 605.379616][ T13] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.223/input/input48 [ 605.455005][ T144] hfsplus: b-tree write err: -5, ino 4 [ 605.469278][T17458] loop2: detected capacity change from 0 to 128 [ 605.609734][ T3011] bcm5974 1-1:0.223: could not read from device [ 605.621751][T17458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 605.633181][T17458] ext4 filesystem being mounted at /1165/mnt supports timestamps until 2038 (0x7fffffff) [ 605.645195][ T13] usb 1-1: USB disconnect, device number 127 [ 605.652741][ T3011] bcm5974 1-1:0.223: could not read from device [ 605.674878][T17429] loop3: detected capacity change from 0 to 32768 [ 605.702362][ T3011] bcm5974 1-1:0.223: could not read from device [ 605.737306][T17429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5584 (17429) [ 605.839838][T17429] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 605.851827][T17429] BTRFS info (device loop3): using free space tree [ 605.864345][T17429] BTRFS info (device loop3): has skinny extents [ 606.127501][T17429] BTRFS info (device loop3): enabling ssd optimizations [ 606.293724][T17492] loop1: detected capacity change from 0 to 256 [ 606.984222][T17526] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 607.000132][T17530] loop2: detected capacity change from 0 to 8 [ 607.037273][T17529] ipt_CLUSTERIP: unknown mode 1850529072 [ 607.064594][T17531] loop1: detected capacity change from 0 to 256 [ 607.205122][T17536] loop3: detected capacity change from 0 to 2048 [ 607.214989][T17531] FAT-fs (loop1): bogus logical sector size 0 [ 607.232067][T17531] FAT-fs (loop1): Can't find a valid FAT filesystem [ 607.278780][T17536] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 607.328545][T17536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.425136][T17549] netlink: 'syz.4.5630': attribute type 21 has an invalid length. [ 607.489418][T17549] netlink: 'syz.4.5630': attribute type 1 has an invalid length. [ 607.573740][T17549] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5630'. [ 607.650478][T17563] netlink: 518 bytes leftover after parsing attributes in process `syz.1.5638'. [ 607.687212][ T8969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 607.783602][T17571] netlink: 'syz.1.5641': attribute type 1 has an invalid length. [ 607.811697][T17571] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5641'. [ 607.971986][ T3684] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 607.993445][ T3617] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 608.267389][ T8969] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 608.282146][ T8969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.302041][ T8969] usb 1-1: Product: syz [ 608.307224][ T8969] usb 1-1: Manufacturer: syz [ 608.312805][ T8969] usb 1-1: SerialNumber: syz [ 608.327065][ T8969] usb 1-1: config 0 descriptor?? [ 608.370959][ T8969] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 608.389041][ T3617] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 608.435810][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 244, changing to 11 [ 608.468916][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 34756, setting to 1024 [ 608.491751][ T3617] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 608.513659][ T3617] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 608.530806][T17585] netlink: 'syz.1.5648': attribute type 21 has an invalid length. [ 608.538942][ T3617] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 608.571490][ T3617] usb 3-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 608.592920][T17585] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5648'. [ 608.613619][ T3011] bcm5974 1-1:0.0: could not read from device [ 608.619993][ T3684] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=79.8a [ 608.628551][T11729] usb 1-1: USB disconnect, device number 2 [ 608.642865][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.673165][ T3684] usb 4-1: Product: syz [ 608.677829][ T3684] usb 4-1: Manufacturer: syz [ 608.682590][ T3684] usb 4-1: SerialNumber: syz [ 608.698289][ T3684] usb 4-1: config 0 descriptor?? [ 608.712261][ T5506] bcm5974 1-1:0.0: could not read from device [ 608.760151][ T3684] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 608.784692][ T3617] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 608.804664][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.829160][ T3617] usb 3-1: Product: syz [ 608.833469][ T3617] usb 3-1: Manufacturer: syz [ 608.859518][ T3617] usb 3-1: SerialNumber: syz [ 608.895473][ T3617] usb 3-1: config 0 descriptor?? [ 608.923985][T17567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 608.931434][T17567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 608.970963][ T5506] udevd[5506]: Error opening device "/dev/input/event4": No such file or directory [ 608.989311][ T3617] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 608.997810][T17597] tmpfs: Bad value for 'mpol' [ 609.002998][ T3684] usb 4-1: qt2_attach - failed to power on unit: -71 [ 609.012179][ T3617] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 609.020774][ T5506] udevd[5506]: Unable to EVIOCGABS device "/dev/input/event4" [ 609.020881][ T3684] quatech2: probe of 4-1:0.0 failed with error -71 [ 609.028371][ T5506] udevd[5506]: Unable to EVIOCGABS device "/dev/input/event4" [ 609.082027][ T3684] usb 4-1: USB disconnect, device number 123 [ 609.085188][ T5506] udevd[5506]: Unable to EVIOCGABS device "/dev/input/event4" [ 609.121294][ T5506] udevd[5506]: Unable to EVIOCGABS device "/dev/input/event4" [ 609.345991][T17567] loop2: detected capacity change from 0 to 4096 [ 609.447798][T17567] NILFS (loop2): unrecognized mount option "0xffffffffffffffff1844674407370955161501777777777777777777777;^jA%pyts)~N/Ue{u"gFI6j!Vmԫg$yÀ߫SD~8Ff_aۉZ4Bb3yGO>TKN=cBe5Eon:" [ 609.481294][T17614] netlink: 'syz.1.5662': attribute type 2 has an invalid length. [ 609.496046][ T3617] usb 3-1: USB disconnect, device number 126 [ 609.515502][ T3617] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 609.531050][T17614] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5662'. [ 609.544000][ T3617] garmin_gps 3-1:0.0: device disconnected [ 609.789930][ T5402] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 610.048373][T17639] loop1: detected capacity change from 0 to 256 [ 610.151758][T17639] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 610.270172][T17639] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 610.302872][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 610.312593][ T5402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 610.353400][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 610.404311][ T5402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 610.441412][ T5402] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 610.461606][ T5402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.527058][T11729] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 610.528935][ T5402] usb 5-1: config 0 descriptor?? [ 610.737948][T17672] loop1: detected capacity change from 0 to 512 [ 610.794940][T11729] usb 1-1: Using ep0 maxpacket: 32 [ 610.801729][T17677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.871909][T17672] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 610.899670][T17672] ext4 filesystem being mounted at /1151/file0 supports timestamps until 2038 (0x7fffffff) [ 610.910363][ T5402] hdpvr 5-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL [ 610.922717][T11729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 100, changing to 7 [ 610.944040][T11729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41106, setting to 1024 [ 611.008544][ T8969] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 611.137608][T11729] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 611.147364][ T5402] hdpvr 5-1:0.0: device init failed [ 611.152641][ T5402] hdpvr: probe of 5-1:0.0 failed with error -12 [ 611.157953][T11729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.187881][T11729] usb 1-1: Product: syz [ 611.196715][T11729] usb 1-1: Manufacturer: syz [ 611.207980][T11729] usb 1-1: SerialNumber: syz [ 611.214341][ T5402] usb 5-1: USB disconnect, device number 118 [ 611.236370][T11729] usb 1-1: config 0 descriptor?? [ 611.276299][T11729] hub 1-1:0.0: bad descriptor, ignoring hub [ 611.293942][T11729] hub: probe of 1-1:0.0 failed with error -5 [ 611.320392][T11729] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 611.351531][T11729] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 611.389986][T11729] usbtouchscreen: probe of 1-1:0.0 failed with error -22 [ 611.414995][ T8969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 611.439661][ T8969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 244, changing to 11 [ 611.478710][ T8969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 34756, setting to 1024 [ 611.534641][ T8969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 611.583784][ T8969] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 611.623283][ T8969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 611.657247][ T8969] usb 4-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 611.683054][T11729] usb 1-1: USB disconnect, device number 3 [ 611.853016][ T8969] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.887062][ T8969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.914164][ T8969] usb 4-1: Product: syz [ 611.940315][ T8969] usb 4-1: Manufacturer: syz [ 611.944968][ T8969] usb 4-1: SerialNumber: syz [ 611.959756][T17702] loop1: detected capacity change from 0 to 8192 [ 611.977793][ T8969] usb 4-1: config 0 descriptor?? [ 612.004864][T17673] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 612.009351][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5709'. [ 612.029377][T17673] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 612.047292][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5709'. [ 612.048635][T17702] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 612.089327][ T8969] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 612.131624][ T8969] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 612.145921][T17702] REISERFS (device loop1): using ordered data mode [ 612.205655][T17702] reiserfs: using flush barriers [ 612.235838][T17702] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 612.290094][T17702] REISERFS (device loop1): checking transaction log (loop1) [ 612.353940][T17702] REISERFS (device loop1): Using tea hash to sort names [ 612.366321][T17702] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 612.512620][T17673] loop3: detected capacity change from 0 to 4096 [ 612.521122][T17726] binder: 17725:17726 ioctl c018620c 200013c0 returned -22 [ 612.712645][T17673] NILFS (loop3): unrecognized mount option "0xffffffffffffffff1844674407370955161501777777777777777777777;^jA%pyts)~N/Ue{u"gFI6j!Vmԫg$yÀ߫SD~8Ff_aۉZ4Bb3yGO>TKN=cBe5Eon:" [ 612.773683][T17735] netlink: 'syz.1.5717': attribute type 1 has an invalid length. [ 612.781722][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 612.819373][ T8969] usb 4-1: USB disconnect, device number 124 [ 612.858270][ T8969] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 612.885024][ T8969] garmin_gps 4-1:0.0: device disconnected [ 612.965007][ T5402] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 612.976906][ T5397] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 613.210478][T11729] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 613.403308][ T5397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 613.413026][ T5397] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 613.431790][ T5397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 613.457655][ T5397] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 613.478375][ T5397] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 613.487560][ T5397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.488677][T17755] libceph: resolve '4..' (ret=-3): failed [ 613.506819][ T5397] usb 1-1: config 0 descriptor?? [ 613.570917][T17754] loop3: detected capacity change from 0 to 8192 [ 613.650397][ T5402] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 613.680873][ T5402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.693656][T17754] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 613.698818][ T5402] usb 3-1: Product: syz [ 613.714284][ T5402] usb 3-1: Manufacturer: syz [ 613.719446][ T5402] usb 3-1: SerialNumber: syz [ 613.735378][ T5402] usb 3-1: config 0 descriptor?? [ 613.740877][T17754] REISERFS (device loop3): using ordered data mode [ 613.750654][T17754] reiserfs: using flush barriers [ 613.762744][T17754] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 613.779631][T11729] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=79.8a [ 613.788038][ T5397] hdpvr 1-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL [ 613.798446][T11729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.802827][ T5402] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 613.817839][T17754] REISERFS (device loop3): checking transaction log (loop3) [ 613.830536][T11729] usb 2-1: Product: syz [ 613.834734][T11729] usb 2-1: Manufacturer: syz [ 613.836703][T17754] REISERFS (device loop3): Using tea hash to sort names [ 613.846781][T17754] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 613.851695][T11729] usb 2-1: SerialNumber: syz [ 613.909931][T11729] usb 2-1: config 0 descriptor?? [ 613.949721][T11729] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 614.012519][ T5397] hdpvr 1-1:0.0: device init failed [ 614.049918][ T5397] hdpvr: probe of 1-1:0.0 failed with error -12 [ 614.056839][ T3011] bcm5974 3-1:0.0: could not read from device [ 614.071816][ T8969] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 614.077726][ T5397] usb 1-1: USB disconnect, device number 4 [ 614.137717][ T5402] usb 3-1: USB disconnect, device number 127 [ 614.183420][T11729] usb 2-1: qt2_attach - failed to power on unit: -71 [ 614.190753][T11729] quatech2: probe of 2-1:0.0 failed with error -71 [ 614.212051][T11729] usb 2-1: USB disconnect, device number 122 [ 614.461507][ T8969] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 614.480627][ T8969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.504810][ T8969] usb 5-1: config 0 descriptor?? [ 614.536393][ T4250] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 614.559024][ T8969] cp210x 5-1:0.0: cp210x converter detected [ 614.677009][T17766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.805706][ T4250] usb 4-1: Using ep0 maxpacket: 8 [ 614.811820][ T8969] usb 5-1: cp210x converter now attached to ttyUSB0 [ 614.822097][T17772] loop2: detected capacity change from 0 to 512 [ 614.942624][ T4250] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 614.954803][T17772] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 614.973765][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.018342][T17772] ext4 filesystem being mounted at /1197/file0 supports timestamps until 2038 (0x7fffffff) [ 615.034921][ T4250] usb 4-1: config 0 descriptor?? [ 615.058292][ T8969] usb 5-1: USB disconnect, device number 119 [ 615.090641][ T8969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.142104][T17781] libceph: resolve '4..' (ret=-3): failed [ 615.142330][ T8969] cp210x 5-1:0.0: device disconnected [ 615.348727][ T4250] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 615.380140][T17787] loop1: detected capacity change from 0 to 1024 [ 615.488609][T17787] hfsplus: bad catalog entry type [ 615.553944][ T3613] hfsplus: b-tree write err: -5, ino 4 [ 615.573209][ T4250] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 615.613559][ T4250] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 615.638953][ T4250] asix: probe of 4-1:0.0 failed with error -71 [ 615.683648][ T4250] usb 4-1: USB disconnect, device number 125 [ 616.342604][T17843] netlink: 'syz.3.5773': attribute type 3 has an invalid length. [ 616.355562][T17844] loop2: detected capacity change from 0 to 512 [ 616.393916][ T4250] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 616.474572][T17844] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 616.521685][T17844] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5772: invalid indirect mapped block 2683928664 (level 1) [ 616.607073][T17844] EXT4-fs (loop2): 1 truncate cleaned up [ 616.629285][T17844] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,grpjquota=,data_err=ignore,jqfmt=vfsold,jqfmt=vfsv0,usrjquota=.obj_type=coup.contrs,errors=continue. Quota mode: writeback. [ 616.819426][ T4250] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 616.843847][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.899780][ T4250] usb 2-1: config 0 descriptor?? [ 616.942825][ T4250] cp210x 2-1:0.0: cp210x converter detected [ 617.161621][T17868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.402799][ T4250] usb 2-1: cp210x converter now attached to ttyUSB0 [ 617.430360][ T4250] usb 2-1: USB disconnect, device number 123 [ 617.488148][ T4250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 617.508370][ T3617] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 617.517005][ T4250] cp210x 2-1:0.0: device disconnected [ 617.947807][ T3617] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.032275][ T3617] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 618.041359][ T3617] usb 4-1: config 1 has no interface number 1 [ 618.060156][ T3617] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 618.084759][ T3617] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 618.171021][T11729] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 618.267363][ T3617] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.277077][ T3617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.288531][ T3617] usb 4-1: Product: syz [ 618.299733][ T3617] usb 4-1: Manufacturer: syz [ 618.304372][ T3617] usb 4-1: SerialNumber: syz [ 618.385823][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5809'. [ 618.438205][T11729] usb 3-1: Using ep0 maxpacket: 16 [ 618.544008][T17930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.574769][T11729] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 618.759105][ T3617] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 618.792364][T11729] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 618.815140][ T3617] usb 4-1: USB disconnect, device number 126 [ 618.829250][T11729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.850835][T11729] usb 3-1: Product: syz [ 618.861905][T11729] usb 3-1: Manufacturer: syz [ 618.867597][T11729] usb 3-1: SerialNumber: syz [ 618.908695][ T4250] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 618.923022][T11729] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input52 [ 619.069493][ T4059] udevd[4059]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.143930][ T3011] bcm5974 3-1:1.0: could not read from device [ 619.173779][T11729] usb 3-1: USB disconnect, device number 2 [ 619.441203][T17945] loop1: detected capacity change from 0 to 16 [ 619.486153][ T4250] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 619.519262][T17945] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 619.536820][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.547627][ T4250] usb 5-1: Product: syz [ 619.557624][ T4250] usb 5-1: Manufacturer: syz [ 619.573613][T17945] cramfs: empty filesystem [ 619.600675][ T4250] usb 5-1: SerialNumber: syz [ 619.627807][ T4250] usb 5-1: config 0 descriptor?? [ 619.663443][T17953] loop3: detected capacity change from 0 to 1024 [ 619.671242][ T4250] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 619.712247][T17955] cgroup: name respecified [ 619.834318][T17953] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 619.986184][ T3011] bcm5974 5-1:0.0: could not read from device [ 620.008608][ T4250] usb 5-1: USB disconnect, device number 120 [ 620.066537][T17969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 620.074128][T17969] IPv6: NLM_F_CREATE should be set when creating new route [ 620.081452][T17969] IPv6: NLM_F_CREATE should be set when creating new route [ 620.150554][T17971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 620.180963][ T5402] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 620.292264][T17979] loop2: detected capacity change from 0 to 256 [ 620.302045][T17978] loop3: detected capacity change from 0 to 1024 [ 620.370570][T17978] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 620.392399][T17978] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 620.458762][T17978] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,jqfmt=vfsold,resuid=0x0000000000000000,jqfmt=vfsold,barrier=0x0000000000000648,data_err=abort,,errors=continue. Quota mode: writeback. [ 620.487063][ T5402] usb 2-1: Using ep0 maxpacket: 16 [ 620.654219][T17987] cgroup: name respecified [ 620.662107][ T5402] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 620.685306][ T5402] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 620.741958][ T5402] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 620.805108][ T5402] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.995457][T18001] xt_TPROXY: Can be used only with -p tcp or -p udp [ 621.046720][ T5402] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 621.076490][ T5402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.102479][T18005] loop3: detected capacity change from 0 to 64 [ 621.108899][ T5402] usb 2-1: Product: syz [ 621.129171][ T5402] usb 2-1: Manufacturer: syz [ 621.142842][ T5402] usb 2-1: SerialNumber: syz [ 621.151024][ T5402] usb 2-1: config 0 descriptor?? [ 621.210107][ T5402] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 621.238401][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5852'. [ 621.390187][T18012] loop3: detected capacity change from 0 to 1024 [ 621.467285][T11729] usb 2-1: USB disconnect, device number 124 [ 621.542189][T18012] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.5854: Invalid block bitmap block 0 in block_group 0 [ 621.652931][T18012] Quota error (device loop3): write_blk: dquota write failed [ 621.709565][T18012] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 621.719885][T18012] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.5854: Failed to acquire dquot type 0 [ 621.752603][T18012] EXT4-fs error (device loop3): ext4_free_blocks:6226: comm syz.3.5854: Freeing blocks not in datazone - block = 0, count = 4096 [ 621.799913][T18012] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.5854: Invalid inode bitmap blk 0 in block_group 0 [ 621.823734][ T9] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 621.847389][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6219: comm kworker/u4:0: Failed to release dquot type 0 [ 621.898757][T18012] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 621.926902][T18012] EXT4-fs (loop3): 1 orphan inode deleted [ 621.948665][T18012] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 622.063735][T18028] xt_TPROXY: Can be used only with -p tcp or -p udp [ 622.097856][T18030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 622.105162][T18030] IPv6: NLM_F_CREATE should be set when creating new route [ 622.112558][T18030] IPv6: NLM_F_CREATE should be set when creating new route [ 622.362927][T18042] rtc_cmos 00:00: Alarms can be up to one day in the future [ 622.497975][T18049] netlink: 'syz.1.5871': attribute type 4 has an invalid length. [ 622.538638][T18049] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5871'. [ 622.566505][T18049] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 622.710154][T18055] loop2: detected capacity change from 0 to 4096 [ 622.770563][T18059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5877'. [ 622.793111][T18055] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 622.818581][T18061] loop1: detected capacity change from 0 to 1024 [ 622.844666][T18055] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 622.891312][T18059] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 622.972335][T18061] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.5875: Invalid block bitmap block 0 in block_group 0 [ 623.016358][T18061] Quota error (device loop1): write_blk: dquota write failed [ 623.084584][ T3574] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 623.109289][T18061] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 623.173868][T18061] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.5875: Failed to acquire dquot type 0 [ 623.201341][T18061] EXT4-fs error (device loop1): ext4_free_blocks:6226: comm syz.1.5875: Freeing blocks not in datazone - block = 0, count = 4096 [ 623.232360][T18061] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.5875: Invalid inode bitmap blk 0 in block_group 0 [ 623.249259][ T9] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 623.265150][T18061] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 623.276926][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6219: comm kworker/u4:0: Failed to release dquot type 0 [ 623.309069][T18061] EXT4-fs (loop1): 1 orphan inode deleted [ 623.341853][T18061] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 623.504616][T18074] loop3: detected capacity change from 0 to 2048 [ 623.545792][ T26] audit: type=1400 audit(1723691861.804:2656): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18075 comm="syz.2.5884" [ 623.601472][T18074] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 623.632726][T18074] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 623.696707][T18074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.085524][ T26] audit: type=1400 audit(1723691862.318:2657): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18097 comm="syz.3.5896" [ 624.140758][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5897'. [ 624.173445][T18101] loop1: detected capacity change from 0 to 1024 [ 624.183189][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5897'. [ 624.215596][T18104] netlink: 'syz.0.5897': attribute type 6 has an invalid length. [ 624.226049][T18106] loop3: detected capacity change from 0 to 2048 [ 624.266677][T18101] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 624.289001][T18106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.318048][T18101] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 624.405351][T18101] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,jqfmt=vfsold,resuid=0x0000000000000000,jqfmt=vfsold,barrier=0x0000000000000648,data_err=abort,,errors=continue. Quota mode: writeback. [ 624.561101][T18117] netlink: 151480 bytes leftover after parsing attributes in process `syz.2.5902'. [ 624.808128][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'. [ 624.908822][T18132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5911'. [ 624.938266][T11729] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 624.949261][T18132] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 625.275018][T18140] loop2: detected capacity change from 0 to 4096 [ 625.313096][T18146] syz.0.5918 (18146): /proc/18145/oom_adj is deprecated, please use /proc/18145/oom_score_adj instead. [ 625.327107][T11729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.361626][T11729] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 625.374229][T18142] loop1: detected capacity change from 0 to 4096 [ 625.393148][T11729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.416196][T18140] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 625.443659][T11729] usb 4-1: config 0 descriptor?? [ 625.450314][T18140] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 625.470023][T18140] ntfs: volume version 3.1. [ 625.474715][T18149] tmpfs: Bad value for 'mpol' [ 625.507852][T11729] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 625.514303][T11729] command write [95] error -22 [ 625.527887][T18142] ntfs: volume version 3.1. [ 625.783687][ T3617] usb 4-1: USB disconnect, device number 127 [ 625.812185][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 625.944505][T18164] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 626.078785][T18173] proc: Bad value for 'gid' [ 626.265285][T11729] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 626.451010][T18191] tmpfs: Bad value for 'mpol' [ 626.659341][T11729] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 626.659387][T11729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.659429][T11729] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 6.00 [ 626.659456][T11729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.661416][T11729] usb 5-1: config 0 descriptor?? [ 626.775194][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5958'. [ 626.819822][T18215] netlink: 'syz.2.5950': attribute type 5 has an invalid length. [ 626.819847][T18215] netlink: 'syz.2.5950': attribute type 11 has an invalid length. [ 626.958759][T11729] usb 5-1: string descriptor 0 read error: -71 [ 627.068160][T18226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5954'. [ 627.105214][T18226] netlink: 'syz.3.5954': attribute type 7 has an invalid length. [ 627.137689][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5954'. [ 627.236163][T11729] usb 5-1: USB disconnect, device number 121 [ 627.250340][T18235] loop2: detected capacity change from 0 to 256 [ 627.377752][T18235] FAT-fs (loop2): Directory bread(block 64) failed [ 627.429810][T18235] FAT-fs (loop2): Directory bread(block 65) failed [ 627.443205][T18235] FAT-fs (loop2): Directory bread(block 66) failed [ 627.455697][T18235] FAT-fs (loop2): Directory bread(block 67) failed [ 627.477306][T18235] FAT-fs (loop2): Directory bread(block 68) failed [ 627.499797][T18235] FAT-fs (loop2): Directory bread(block 69) failed [ 627.509803][T18244] netlink: 'syz.3.5963': attribute type 5 has an invalid length. [ 627.525729][T18235] FAT-fs (loop2): Directory bread(block 70) failed [ 627.532483][T18244] netlink: 'syz.3.5963': attribute type 11 has an invalid length. [ 627.546546][T18235] FAT-fs (loop2): Directory bread(block 71) failed [ 627.573542][T18235] FAT-fs (loop2): Directory bread(block 72) failed [ 627.610177][T18235] FAT-fs (loop2): Directory bread(block 73) failed [ 627.763192][T18253] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 627.859462][T18256] loop3: detected capacity change from 0 to 16 [ 627.893386][T18259] proc: Bad value for 'gid' [ 627.949017][T18256] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 627.963543][ T5402] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 628.229011][T18277] loop1: detected capacity change from 0 to 1024 [ 628.370086][ T5402] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 628.406765][ T5402] usb 1-1: config 0 has no interface number 0 [ 628.427669][ T5402] usb 1-1: config 0 interface 13 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 628.476852][T18283] loop2: detected capacity change from 0 to 4096 [ 628.483436][ T5402] usb 1-1: config 0 interface 13 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 628.514846][ T5402] usb 1-1: config 0 interface 13 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 628.564396][T18283] __ntfs_error: 24 callbacks suppressed [ 628.564416][T18283] ntfs: (device loop2): parse_options(): NLS character set cp862 mft_zone_multiplier=0xfffffffffffffffemft_zone_multipl not found. Using previous one cp950. [ 628.647492][T18283] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 628.690736][T18283] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 628.722926][ T5402] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=51.76 [ 628.764380][ T5402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.783812][T18283] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 628.798280][ T5402] usb 1-1: Product: syz [ 628.802686][ T5402] usb 1-1: Manufacturer: syz [ 628.818286][T18283] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 628.828590][ T5402] usb 1-1: SerialNumber: syz [ 628.835918][ T5402] usb 1-1: config 0 descriptor?? [ 628.844181][T18283] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 628.889180][T18283] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 628.916452][ T5402] keyspan 1-1:0.13: Keyspan 4 port adapter converter detected [ 628.924976][T18283] ntfs: volume version 3.1. [ 628.943336][T18283] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 628.955453][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 87 [ 628.974609][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 7 [ 628.983192][T18283] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 628.997875][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 81 [ 629.017811][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 1 [ 629.021826][ T8969] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 629.033120][T18283] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 629.049282][ T5402] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 629.073280][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 82 [ 629.086562][ T5402] keyspan 1-1:0.13: unsupported endpoint type 0 [ 629.132363][ T5402] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 629.154324][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 83 [ 629.187710][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 3 [ 629.209204][ T5402] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 629.230770][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 84 [ 629.255419][ T5402] keyspan 1-1:0.13: found no endpoint descriptor for endpoint 4 [ 629.274743][ T5402] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 629.321267][ T8969] usb 2-1: Using ep0 maxpacket: 32 [ 629.332697][ T5402] usb 1-1: USB disconnect, device number 5 [ 629.395533][ T5402] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 629.419741][ T5402] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 629.449856][ T8969] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 629.461950][ T5402] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 629.465520][ T8969] usb 2-1: config 0 has no interface number 0 [ 629.516679][ T5402] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 629.554001][ T5402] keyspan 1-1:0.13: device disconnected [ 629.559339][T18309] loop3: detected capacity change from 0 to 8192 [ 629.634945][T18309] Dev loop3: RDB in block 1 has bad checksum [ 629.663449][ T8969] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 629.684322][ T8969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.693117][ T8969] usb 2-1: Product: syz [ 629.698143][ T3026] Dev loop3: RDB in block 1 has bad checksum [ 629.706416][ T8969] usb 2-1: Manufacturer: syz [ 629.715076][ T8969] usb 2-1: SerialNumber: syz [ 629.737343][ T8969] usb 2-1: config 0 descriptor?? [ 629.887796][T11729] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 629.955861][T18330] loop3: detected capacity change from 0 to 764 [ 630.017442][ T8969] usb 2-1: USB disconnect, device number 125 [ 630.057643][T18330] Symlink component flag not implemented [ 630.068131][T18330] Symlink component flag not implemented [ 630.079702][T18330] Symlink component flag not implemented (129) [ 630.089769][T18330] Symlink component flag not implemented (6) [ 630.149039][T11729] usb 3-1: Using ep0 maxpacket: 8 [ 630.219980][ T5397] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 630.272948][T11729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 630.304858][T11729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 630.343298][T11729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.362555][T11729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 630.388764][T11729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 630.399349][T11729] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 630.425746][T11729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.450909][T11729] usb 3-1: config 0 descriptor?? [ 630.476060][T18319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 630.508615][T18319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 630.679352][ T5397] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.724209][T18349] loop1: detected capacity change from 0 to 512 [ 630.741710][ T5397] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 630.756257][ T5397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.788010][T18349] EXT4-fs (loop1): invalid first ino: 0 [ 630.795953][ T5397] usb 1-1: config 0 descriptor?? [ 630.810278][ T5402] usb 3-1: USB disconnect, device number 3 [ 630.840380][ T5397] usb 1-1: bad CDC descriptors [ 630.847762][T18352] loop3: detected capacity change from 0 to 4096 [ 630.966178][T18352] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 631.048299][T18352] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 631.071423][T11729] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 631.080409][ T3616] usb 1-1: USB disconnect, device number 6 [ 631.113507][T18358] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6018'. [ 631.268385][ T4211] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 631.279609][ T3579] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 631.331535][T11729] usb 5-1: Using ep0 maxpacket: 16 [ 631.459568][T11729] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.513204][T11729] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 631.543450][T11729] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 631.596303][T11729] usb 5-1: config 0 interface 0 has no altsetting 0 [ 631.702217][T18373] loop2: detected capacity change from 0 to 1024 [ 631.780144][T11729] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 631.789560][T11729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.790907][T18380] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6030'. [ 631.839351][T11729] usb 5-1: Product: syz [ 631.846005][T11729] usb 5-1: Manufacturer: syz [ 631.850657][T11729] usb 5-1: SerialNumber: syz [ 631.879123][T11729] usb 5-1: config 0 descriptor?? [ 631.922167][T11729] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input55 [ 632.371905][ T3616] usb 5-1: USB disconnect, device number 122 [ 632.391066][T18404] loop2: detected capacity change from 0 to 256 [ 632.515311][T18404] FAT-fs (loop2): Directory bread(block 64) failed [ 632.558989][T18404] FAT-fs (loop2): Directory bread(block 65) failed [ 632.574784][T18404] FAT-fs (loop2): Directory bread(block 66) failed [ 632.581362][T18404] FAT-fs (loop2): Directory bread(block 67) failed [ 632.602764][T18411] loop3: detected capacity change from 0 to 1024 [ 632.644927][T18404] FAT-fs (loop2): Directory bread(block 68) failed [ 632.678111][T18404] FAT-fs (loop2): Directory bread(block 69) failed [ 632.679177][T18415] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6045'. [ 632.721685][T18404] FAT-fs (loop2): Directory bread(block 70) failed [ 632.728271][T18404] FAT-fs (loop2): Directory bread(block 71) failed [ 632.762959][T18404] FAT-fs (loop2): Directory bread(block 72) failed [ 632.779389][T18404] FAT-fs (loop2): Directory bread(block 73) failed [ 632.858584][T18404] FAT-fs (loop2): Filesystem has been set read-only [ 633.062289][T18428] binder: 18420:18428 ioctl 541b 0 returned -22 [ 633.107937][T18424] xt_cluster: node mask cannot exceed total number of nodes [ 633.182789][T18432] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 633.298939][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6053'. [ 633.308133][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6053'. [ 633.349325][T18442] UBIFS error (pid: 18442): cannot open "", error -22 [ 633.355937][T18433] loop2: detected capacity change from 0 to 4096 [ 633.363762][T18434] loop1: detected capacity change from 0 to 4096 [ 633.419749][T18438] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6053'. [ 633.469484][T18433] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 633.472045][T18434] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 633.526193][T18433] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 633.722909][ T144] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 633.752037][ T3574] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 633.833285][T18458] xt_cluster: node mask cannot exceed total number of nodes [ 633.940283][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 634.048311][T18468] UBIFS error (pid: 18468): cannot open "", error -22 [ 634.137688][T18475] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 634.229414][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 634.323576][T18485] syz.0.6078 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 634.358161][ T13] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 634.383286][ T13] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 634.424481][ T13] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 634.450998][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 634.489799][T18484] loop2: detected capacity change from 0 to 4096 [ 634.611239][T18484] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 634.634681][ T13] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 634.646374][T18495] cgroup: release_agent respecified [ 634.666095][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.696128][ T13] usb 4-1: Product: syz [ 634.718822][ T13] usb 4-1: Manufacturer: syz [ 634.738839][ T13] usb 4-1: SerialNumber: syz [ 634.774422][ T13] usb 4-1: config 0 descriptor?? [ 634.807452][T18484] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 634.820213][ T13] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 634.839698][T18484] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 634.998234][ T144] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 635.029231][ T3574] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 635.074758][ T5397] usb 4-1: USB disconnect, device number 2 [ 635.900654][T18501] loop1: detected capacity change from 0 to 32768 [ 635.982275][T18501] XFS: attr2 mount option is deprecated. [ 635.994831][T18553] netlink: 'syz.0.6113': attribute type 1 has an invalid length. [ 636.118040][T18501] XFS (loop1): Mounting V5 Filesystem [ 636.345226][T18501] XFS (loop1): Ending clean mount [ 636.351902][T18576] QAT: failed to copy from user cfg_data. [ 636.389649][T18501] XFS (loop1): Quotacheck needed: Please wait. [ 636.548091][T18501] XFS (loop1): Quotacheck: Done. [ 636.636452][ T3568] XFS (loop1): Unmounting Filesystem [ 637.187295][T18602] loop3: detected capacity change from 0 to 4096 [ 637.272760][T18602] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 637.369876][T18602] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 637.430261][T18602] ntfs3: loop3: ino=5, "/" directory corrupted [ 637.487249][T18610] loop1: detected capacity change from 0 to 1764 [ 637.936938][T18620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6142'. [ 637.999720][T18604] loop2: detected capacity change from 0 to 32768 [ 638.215757][ T13] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 638.233957][T18634] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6149'. [ 638.311975][ T3617] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 638.473563][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 638.579406][ T3617] usb 4-1: Using ep0 maxpacket: 8 [ 638.618934][T18648] tmpfs: Bad value for 'mpol' [ 638.655477][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 638.707919][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 638.729436][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 638.750299][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.762073][ T13] usb 2-1: config 1 has an invalid interface number: 26 but max is 1 [ 638.770710][ T13] usb 2-1: config 1 has an invalid interface number: 89 but max is 1 [ 638.790806][ T13] usb 2-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 638.801743][ T3617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 638.816219][ T13] usb 2-1: config 1 has no interface number 0 [ 638.822352][ T13] usb 2-1: config 1 has no interface number 1 [ 638.835832][ T3617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 638.846038][ T13] usb 2-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 638.856934][ T3617] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 638.878679][ T13] usb 2-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 638.888634][ T13] usb 2-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 638.901121][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.911341][ T3617] usb 4-1: config 0 descriptor?? [ 638.916435][ T13] usb 2-1: config 1 interface 26 altsetting 213 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 638.930131][ T13] usb 2-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.943780][T18625] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 638.951005][T18625] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 638.958767][ T13] usb 2-1: config 1 interface 26 has no altsetting 0 [ 638.965817][ T13] usb 2-1: config 1 interface 89 has no altsetting 0 [ 639.156917][ T13] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 639.166001][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.197610][ T13] usb 2-1: Product: syz [ 639.224254][ T13] usb 2-1: Manufacturer: syz [ 639.228909][ T13] usb 2-1: SerialNumber: syz [ 639.256829][ T3617] usb 4-1: USB disconnect, device number 3 [ 639.264156][T18618] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 639.271257][T18618] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 639.694796][ T13] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 639.713168][ T13] usb 2-1: 26:2 : does not exist [ 639.779954][ T13] usb 2-1: unknown interface protocol 0x13, assuming v1 [ 639.808701][ T13] usb 2-1: 89:2 : does not exist [ 639.824892][ T13] usb 2-1: USB disconnect, device number 126 [ 640.036171][T18664] netlink: 'syz.3.6162': attribute type 7 has an invalid length. [ 640.108797][ T4059] udevd[4059]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.143363][T18668] loop3: detected capacity change from 0 to 256 [ 640.572183][T18687] netlink: 'syz.4.6174': attribute type 3 has an invalid length. [ 640.575537][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6175'. [ 641.071662][ T5397] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 641.259373][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6192'. [ 641.289242][T18719] loop1: detected capacity change from 0 to 4096 [ 641.369597][ T5397] usb 5-1: Using ep0 maxpacket: 8 [ 641.436350][T18727] netlink: 'syz.0.6195': attribute type 3 has an invalid length. [ 641.524318][ T5397] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 641.733102][ T5397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.785576][ T5397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.807204][ T5397] usb 5-1: Product: syz [ 641.822029][ T5397] usb 5-1: Manufacturer: syz [ 641.846251][ T5397] usb 5-1: SerialNumber: syz [ 641.924181][ T5397] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 642.023428][T18744] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.6201'. [ 642.116354][T18744] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 642.180002][ T8969] usb 5-1: USB disconnect, device number 123 [ 642.235107][T18721] loop3: detected capacity change from 0 to 32768 [ 642.341767][T18721] XFS: attr2 mount option is deprecated. [ 642.578977][T18721] XFS (loop3): Mounting V5 Filesystem [ 642.742484][T18721] XFS (loop3): Ending clean mount [ 642.750417][T18721] XFS (loop3): Quotacheck needed: Please wait. [ 642.785285][ T5402] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 642.858907][T18721] XFS (loop3): Quotacheck: Done. [ 643.008702][ T3579] XFS (loop3): Unmounting Filesystem [ 643.240635][ T5402] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.260104][ T5402] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.337609][T18819] netlink: 'syz.2.6239': attribute type 9 has an invalid length. [ 643.372143][T18819] netlink: 'syz.2.6239': attribute type 7 has an invalid length. [ 643.379576][ T5402] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 643.389314][ T5402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 643.390177][T18819] netlink: 'syz.2.6239': attribute type 8 has an invalid length. [ 643.482006][ T5402] usb 1-1: SerialNumber: syz [ 643.841638][ T5402] usb 1-1: invalid UAC_HEADER (v1) [ 643.886293][ T5402] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 643.946919][ T5402] usb 1-1: USB disconnect, device number 7 [ 644.255136][ T4059] udevd[4059]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.286548][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6258'. [ 644.309044][T18864] netlink: 'syz.3.6260': attribute type 9 has an invalid length. [ 644.347561][T18864] netlink: 'syz.3.6260': attribute type 7 has an invalid length. [ 644.371592][T18864] netlink: 'syz.3.6260': attribute type 8 has an invalid length. [ 644.828620][T18891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6282'. [ 644.833652][T11729] Bluetooth: hci0: command 0x0406 tx timeout [ 644.876034][T18891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6282'. [ 644.906803][T18891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6282'. [ 645.072569][T18905] netlink: 'syz.1.6275': attribute type 2 has an invalid length. [ 645.271882][T11729] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 645.370681][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6288'. [ 645.508653][ T8969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 645.656787][T11729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.678094][T11729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.772475][T11729] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 645.791924][T11729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.809329][T11729] usb 3-1: SerialNumber: syz [ 645.902580][ T8969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.932704][ T8969] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 645.962243][ T8969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.972721][T18945] tmpfs: Bad value for 'mpol' [ 645.984974][ T8969] usb 1-1: config 0 descriptor?? [ 646.059842][ T8969] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 646.068055][ T8969] rndis_host: probe of 1-1:0.0 failed with error -22 [ 646.084367][ T8969] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 646.098832][ T8969] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 646.105893][ T8969] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 646.159059][T11729] usb 3-1: invalid UAC_HEADER (v1) [ 646.202803][T11729] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 646.222168][T11729] usb 3-1: USB disconnect, device number 4 [ 646.290250][ T8969] usb 1-1: USB disconnect, device number 8 [ 646.454571][ T4059] udevd[4059]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.785462][T18967] netlink: 'syz.2.6309': attribute type 2 has an invalid length. [ 646.843316][ T5402] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 647.311390][ T5402] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 647.330691][ T5402] usb 2-1: config 0 has no interface number 0 [ 647.359723][ T5402] usb 2-1: config 0 interface 156 has no altsetting 0 [ 647.366582][ T5402] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 647.406201][ T5402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.445590][ T5402] usb 2-1: config 0 descriptor?? [ 647.507041][ T5402] hub 2-1:0.156: bad descriptor, ignoring hub [ 647.513205][ T5402] hub: probe of 2-1:0.156 failed with error -5 [ 647.539474][ T5402] option 2-1:0.156: GSM modem (1-port) converter detected [ 647.698321][T11729] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 647.786182][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6335'. [ 647.877760][ T5402] usb 2-1: USB disconnect, device number 127 [ 647.891616][ T5402] option 2-1:0.156: device disconnected [ 648.094049][T11729] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 648.102461][T11729] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 648.132998][T11729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 648.142871][T11729] usb 3-1: config 1 has no interface number 0 [ 648.172930][T11729] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.183174][T11729] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 648.203310][T11729] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 648.222126][T11729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.299880][T11729] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 648.492990][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6347'. [ 648.533364][T11729] snd_usb_pod 3-1:1.1: invalid control EP [ 648.546500][T11729] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 648.590651][T11729] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 648.621160][T11729] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 648.787234][T11729] usb 3-1: USB disconnect, device number 5 [ 648.959611][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'. [ 649.440351][T19084] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6364'. [ 649.512119][T19085] loop2: detected capacity change from 0 to 2048 [ 649.601272][ T5402] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 649.642745][T19091] loop1: detected capacity change from 0 to 512 [ 649.674695][T19093] loop3: detected capacity change from 0 to 256 [ 649.824512][T19091] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 649.839165][T19091] ext4 filesystem being mounted at /1305/file0 supports timestamps until 2038 (0x7fffffff) [ 649.890066][ T5402] usb 5-1: Using ep0 maxpacket: 32 [ 650.073618][T19107] loop3: detected capacity change from 0 to 64 [ 650.266310][T19116] netlink: 'syz.1.6378': attribute type 1 has an invalid length. [ 650.274227][T19116] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6378'. [ 650.296332][ T5402] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 650.319791][ T5402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.339071][ T5402] usb 5-1: Product: syz [ 650.343377][ T5402] usb 5-1: Manufacturer: syz [ 650.347997][ T5402] usb 5-1: SerialNumber: syz [ 650.387462][ T5402] usb 5-1: config 0 descriptor?? [ 650.436993][T19120] loop3: detected capacity change from 0 to 256 [ 650.459070][ T5402] go7007: probe of 5-1:0.0 failed with error -12 [ 650.497117][T19120] exfat: Deprecated parameter 'utf8' [ 650.503051][T11729] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 650.537344][T19120] exfat: Deprecated parameter 'namecase' [ 650.596877][T19128] netlink: 'syz.1.6384': attribute type 5 has an invalid length. [ 650.616368][T19120] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 650.702463][ T5402] usb 5-1: USB disconnect, device number 124 [ 651.066162][T11729] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 651.085301][T11729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.147981][T11729] usb 3-1: Product: syz [ 651.169569][T11729] usb 3-1: Manufacturer: syz [ 651.191228][T11729] usb 3-1: SerialNumber: syz [ 651.203494][T19140] loop3: detected capacity change from 0 to 8192 [ 651.219633][T11729] usb 3-1: config 0 descriptor?? [ 651.286857][T19140] REISERFS warning (device loop3): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 651.525876][T11729] mos7840 3-1:0.0: required endpoints missing [ 651.759612][ T3617] usb 3-1: USB disconnect, device number 6 [ 651.781434][T19173] loop1: detected capacity change from 0 to 256 [ 651.978894][T11729] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 652.118845][T19188] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6413'. [ 652.138295][T19188] netlink: 'syz.1.6413': attribute type 2 has an invalid length. [ 652.235326][T19195] netlink: 'syz.3.6417': attribute type 5 has an invalid length. [ 652.263182][T11729] usb 1-1: Using ep0 maxpacket: 16 [ 652.314445][T19197] loop1: detected capacity change from 0 to 64 [ 652.552002][ T5402] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 652.562811][T11729] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 652.594015][T11729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.616730][T11729] usb 1-1: Product: syz [ 652.621026][T11729] usb 1-1: Manufacturer: syz [ 652.625641][T11729] usb 1-1: SerialNumber: syz [ 652.656847][T19213] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6426'. [ 652.667304][T11729] usb 1-1: config 0 descriptor?? [ 652.710488][T19215] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6428'. [ 652.725144][T11729] gspca_main: spca501-2.14.0 probing 0497:c001 [ 652.748197][T19215] netlink: 'syz.3.6428': attribute type 2 has an invalid length. [ 652.875203][ T5402] usb 5-1: Using ep0 maxpacket: 32 [ 652.959537][T11729] gspca_spca501: reg write: error -71 [ 652.965146][T11729] spca501 1-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 652.991845][T11729] spca501: probe of 1-1:0.0 failed with error -22 [ 653.022318][T11729] usb 1-1: USB disconnect, device number 9 [ 653.037947][ T5402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 653.161868][T19233] loop2: detected capacity change from 0 to 64 [ 653.247154][ T5402] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 653.266739][ T5402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.290756][ T5402] usb 5-1: Product: syz [ 653.295054][ T5402] usb 5-1: Manufacturer: syz [ 653.316649][ T5402] usb 5-1: SerialNumber: syz [ 653.344785][ T5402] usb 5-1: config 0 descriptor?? [ 653.409467][ T5402] usb 5-1: no audio or video endpoints found [ 653.559169][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.565641][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.705354][T19225] loop1: detected capacity change from 0 to 32768 [ 653.750137][ T5402] usb 5-1: USB disconnect, device number 125 [ 653.803529][T19225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6431 (19225) [ 653.888397][T19247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6444'. [ 653.888639][T19225] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 653.952428][T19225] BTRFS info (device loop1): using free space tree [ 653.962388][T19225] BTRFS info (device loop1): has skinny extents [ 654.060797][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 654.097477][T19235] loop3: detected capacity change from 0 to 32768 [ 654.159301][T19225] BTRFS info (device loop1): enabling ssd optimizations [ 654.220086][T19235] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.6437 (19235) [ 654.262395][ T8969] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 654.344818][T19235] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 654.358827][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 654.392430][T19235] BTRFS info (device loop3): force zlib compression, level 3 [ 654.399963][T19235] BTRFS info (device loop3): force clearing of disk cache [ 654.446275][T19235] BTRFS info (device loop3): setting nodatasum [ 654.452496][T19235] BTRFS info (device loop3): allowing degraded mounts [ 654.504281][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 654.514244][T19235] BTRFS info (device loop3): enabling disk space caching [ 654.543418][T19235] BTRFS info (device loop3): disk space caching is enabled [ 654.550691][T19235] BTRFS info (device loop3): has skinny extents [ 654.647606][ T8969] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 654.668207][ T8969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.682367][ T8969] usb 3-1: config 0 descriptor?? [ 654.722437][ T23] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=7c.07 [ 654.723398][ T8969] cp210x 3-1:0.0: cp210x converter detected [ 654.731564][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.763767][ T23] usb 1-1: Product: syz [ 654.776219][ T23] usb 1-1: Manufacturer: syz [ 654.780950][ T23] usb 1-1: SerialNumber: syz [ 654.805533][ T23] usb 1-1: config 0 descriptor?? [ 654.927452][T19289] device  entered promiscuous mode [ 654.988786][T19235] BTRFS info (device loop3): clearing free space tree [ 655.009541][T19235] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 655.050948][T19235] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 655.103538][T11729] usb 1-1: USB disconnect, device number 10 [ 655.203326][ T8969] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 655.247509][ T8969] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 655.267621][ T8969] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 655.296521][ T8969] usb 3-1: cp210x converter now attached to ttyUSB0 [ 655.306333][T19235] BTRFS info (device loop3): balance: start -sdrange=0..0 [ 655.326391][ T8969] usb 3-1: USB disconnect, device number 7 [ 655.354424][ T8969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 655.363707][ T8969] cp210x 3-1:0.0: device disconnected [ 655.375807][T19235] BTRFS info (device loop3): relocating block group 1048576 flags system [ 655.418409][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 655.447063][T19302] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6452'. [ 655.502101][T19235] BTRFS info (device loop3): balance: ended with status: 0 [ 655.723682][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 656.057468][T19316] netlink: 'syz.4.6459': attribute type 9 has an invalid length. [ 656.110936][T19316] netlink: 'syz.4.6459': attribute type 6 has an invalid length. [ 656.285239][ T8969] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 656.298678][ T23] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 656.322276][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.330824][ T23] usb 2-1: Product: syz [ 656.335057][ T23] usb 2-1: Manufacturer: syz [ 656.339828][ T23] usb 2-1: SerialNumber: syz [ 656.354258][ T23] usb 2-1: config 0 descriptor?? [ 656.364618][T19323] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6463'. [ 656.373703][T19323] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6463'. [ 656.403508][ T23] gspca_main: spca501-2.14.0 probing 0497:c001 [ 656.625129][ T23] gspca_spca501: reg write: error -71 [ 656.630550][ T23] spca501 2-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 656.659565][ T23] spca501: probe of 2-1:0.0 failed with error -22 [ 656.689240][ T23] usb 2-1: USB disconnect, device number 2 [ 656.797737][T19341] netlink: 'syz.0.6471': attribute type 6 has an invalid length. [ 656.817465][T19341] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6471'. [ 656.860582][ T8969] usb 3-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=ad.1a [ 656.890819][ T8969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.900741][ T8969] usb 3-1: Product: syz [ 656.920847][ T8969] usb 3-1: Manufacturer: syz [ 656.937967][ T8969] usb 3-1: SerialNumber: syz [ 656.960025][ T8969] usb 3-1: config 0 descriptor?? [ 657.030638][T19354] loop3: detected capacity change from 0 to 128 [ 657.123946][T19354] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 657.236951][ T3579] sysv_free_block: flc_count > flc_size [ 657.253559][ T3579] sysv_free_block: flc_count > flc_size [ 657.256110][ T8969] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 657.268148][ T3579] sysv_free_block: flc_count > flc_size [ 657.273720][ T3579] sysv_free_block: flc_count > flc_size [ 657.333105][ T3579] sysv_free_block: flc_count > flc_size [ 657.351980][ T3579] sysv_free_block: flc_count > flc_size [ 657.357609][ T3579] sysv_free_block: flc_count > flc_size [ 657.395900][ T3579] sysv_free_block: flc_count > flc_size [ 657.401494][ T3579] sysv_free_block: flc_count > flc_size [ 657.437425][ T3579] sysv_free_block: flc_count > flc_size [ 657.451460][ T3579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 657.493338][ T8969] usb 3-1: USB disconnect, device number 8 [ 657.688503][T19382] device  entered promiscuous mode [ 657.796316][T19389] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 657.815852][T19386] netlink: 'syz.1.6491': attribute type 6 has an invalid length. [ 657.848525][T19386] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6491'. [ 658.182434][T19408] CIFS mount error: No usable UNC path provided in device string! [ 658.182434][T19408] [ 658.237882][T19408] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.383341][T19422] netlink: 'syz.2.6510': attribute type 2 has an invalid length. [ 658.619978][T19432] loop3: detected capacity change from 0 to 2048 [ 658.695683][T19432] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 658.760757][T19442] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 658.770846][T19444] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.6520'. [ 658.783923][T19432] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 658.820343][T19432] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 658.823032][T19444] netlink: zone id is out of range [ 658.903782][T19432] Remounting filesystem read-only [ 658.914562][T19432] NILFS (loop3): error -5 truncating bmap (ino=15) [ 658.958135][T19451] loop1: detected capacity change from 0 to 16 [ 658.964402][T19432] attempt to access beyond end of device [ 658.964402][T19432] loop3: rw=0, want=262218, limit=2048 [ 659.020450][T19432] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 659.065992][T19451] erofs: (device loop1): mounted with root inode @ nid 36. [ 659.103565][T19451] attempt to access beyond end of device [ 659.103565][T19451] loop1: rw=0, want=34359739352, limit=16 [ 659.140707][ T3579] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 659.169504][ T3579] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 659.176825][ T3579] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 659.255550][ T3579] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.284861][T19459] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 659.287305][ T3579] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.338224][ T3579] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 659.413401][ T3579] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 659.427624][ T3579] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 659.473849][ T3579] NILFS (loop3): discard dirty block: blocknr=131108, size=1024 [ 659.502293][ T3579] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 659.509644][ T3579] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 659.808962][T19481] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6540'. [ 659.835462][T19483] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6541'. [ 659.853821][T19481] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6540'. [ 660.136695][T19495] loop2: detected capacity change from 0 to 1024 [ 660.397592][T19495] attempt to access beyond end of device [ 660.397592][T19495] loop2: rw=0, want=201326594, limit=1024 [ 660.452857][T19495] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 660.479968][T19495] hfsplus: unable to mark blocks free: error -5 [ 660.487347][T19495] hfsplus: can't free extent [ 660.520077][T19495] [ 660.522439][T19495] ====================================================== [ 660.529484][T19495] WARNING: possible circular locking dependency detected [ 660.536595][T19495] 5.15.164-syzkaller #0 Not tainted [ 660.541796][T19495] ------------------------------------------------------ [ 660.548821][T19495] syz.2.6546/19495 is trying to acquire lock: [ 660.554894][T19495] ffff88807e6b00b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x864/0xb80 [ 660.564843][T19495] [ 660.564843][T19495] but task is already holding lock: [ 660.572344][T19495] ffff88801e4e1c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2e1/0xb80 [ 660.583517][T19495] [ 660.583517][T19495] which lock already depends on the new lock. [ 660.583517][T19495] [ 660.593930][T19495] [ 660.593930][T19495] the existing dependency chain (in reverse order) is: [ 660.602961][T19495] [ 660.602961][T19495] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 660.612028][T19495] lock_acquire+0x1db/0x4f0 [ 660.617082][T19495] __mutex_lock_common+0x1da/0x25a0 [ 660.622823][T19495] mutex_lock_nested+0x17/0x20 [ 660.628150][T19495] hfsplus_file_extend+0x1d2/0x1b10 [ 660.633986][T19495] hfsplus_bmap_reserve+0x101/0x4e0 [ 660.639725][T19495] hfsplus_create_cat+0x1a9/0x1ba0 [ 660.645375][T19495] hfsplus_fill_super+0x13e6/0x1c90 [ 660.651212][T19495] mount_bdev+0x2c9/0x3f0 [ 660.656085][T19495] legacy_get_tree+0xeb/0x180 [ 660.661306][T19495] vfs_get_tree+0x88/0x270 [ 660.666261][T19495] do_new_mount+0x2ba/0xb40 [ 660.671304][T19495] __se_sys_mount+0x2d5/0x3c0 [ 660.676516][T19495] do_syscall_64+0x3b/0xb0 [ 660.681729][T19495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.688164][T19495] [ 660.688164][T19495] -> #0 (&tree->tree_lock){+.+.}-{3:3}: [ 660.695929][T19495] validate_chain+0x1649/0x5930 [ 660.701316][T19495] __lock_acquire+0x1295/0x1ff0 [ 660.706700][T19495] lock_acquire+0x1db/0x4f0 [ 660.711730][T19495] __mutex_lock_common+0x1da/0x25a0 [ 660.717467][T19495] mutex_lock_nested+0x17/0x20 [ 660.722770][T19495] hfsplus_file_truncate+0x864/0xb80 [ 660.728591][T19495] hfsplus_delete_inode+0x170/0x220 [ 660.734416][T19495] hfsplus_unlink+0x50d/0x7f0 [ 660.739660][T19495] vfs_unlink+0x359/0x5f0 [ 660.744523][T19495] do_unlinkat+0x4a3/0x950 [ 660.749471][T19495] __x64_sys_unlink+0x45/0x50 [ 660.754690][T19495] do_syscall_64+0x3b/0xb0 [ 660.759642][T19495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.766069][T19495] [ 660.766069][T19495] other info that might help us debug this: [ 660.766069][T19495] [ 660.776396][T19495] Possible unsafe locking scenario: [ 660.776396][T19495] [ 660.783646][ T3617] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 660.783847][T19495] CPU0 CPU1 [ 660.783855][T19495] ---- ---- [ 660.802097][T19495] lock(&HFSPLUS_I(inode)->extents_lock); [ 660.807918][T19495] lock(&tree->tree_lock); [ 660.815036][T19495] lock(&HFSPLUS_I(inode)->extents_lock); [ 660.823369][T19495] lock(&tree->tree_lock); [ 660.827886][T19495] [ 660.827886][T19495] *** DEADLOCK *** [ 660.827886][T19495] [ 660.836039][T19495] 5 locks held by syz.2.6546/19495: [ 660.841244][T19495] #0: ffff88807e6b2460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 660.850504][T19495] #1: ffff88801e4e5400 (&type->i_mutex_dir_key#14/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x950 [ 660.860901][T19495] #2: ffff88801e4e1e00 (&sb->s_type->i_mutex_key#32){+.+.}-{3:3}, at: vfs_unlink+0xe0/0x5f0 [ 660.871134][T19495] #3: ffff88807e3b4198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x15d/0x7f0 [ 660.880843][T19495] #4: ffff88801e4e1c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2e1/0xb80 [ 660.892458][T19495] [ 660.892458][T19495] stack backtrace: [ 660.898390][T19495] CPU: 1 PID: 19495 Comm: syz.2.6546 Not tainted 5.15.164-syzkaller #0 [ 660.901232][ T8969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 660.906638][T19495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 660.906653][T19495] Call Trace: [ 660.906661][T19495] [ 660.906669][T19495] dump_stack_lvl+0x1e3/0x2d0 [ 660.935032][T19495] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 660.940699][T19495] ? print_circular_bug+0x12b/0x1a0 [ 660.945933][T19495] check_noncircular+0x2f8/0x3b0 [ 660.950892][T19495] ? mark_lock+0x98/0x340 [ 660.955246][T19495] ? add_chain_block+0x850/0x850 [ 660.960295][T19495] ? lockdep_lock+0x11f/0x2a0 [ 660.964994][T19495] validate_chain+0x1649/0x5930 [ 660.969868][T19495] ? print_irqtrace_events+0x210/0x210 [ 660.975554][T19495] ? do_raw_spin_unlock+0x137/0x8b0 [ 660.980767][T19495] ? reacquire_held_locks+0x660/0x660 [ 660.986154][T19495] ? finish_lock_switch+0x8f/0x100 [ 660.991283][T19495] ? lockdep_hardirqs_on+0x94/0x130 [ 660.996541][T19495] ? finish_lock_switch+0x8f/0x100 [ 661.001675][T19495] ? finish_task_switch+0x134/0x630 [ 661.006915][T19495] ? look_up_lock_class+0x77/0x120 [ 661.012046][T19495] ? register_lock_class+0x100/0x9a0 [ 661.017357][T19495] ? __schedule+0x12cc/0x45b0 [ 661.022049][T19495] ? is_dynamic_key+0x1f0/0x1f0 [ 661.026918][T19495] ? vprintk_emit+0xbf/0x150 [ 661.031614][T19495] ? mark_lock+0x98/0x340 [ 661.035970][T19495] __lock_acquire+0x1295/0x1ff0 [ 661.040941][T19495] lock_acquire+0x1db/0x4f0 [ 661.045467][T19495] ? hfsplus_file_truncate+0x864/0xb80 [ 661.050949][T19495] ? read_lock_is_recursive+0x10/0x10 [ 661.056347][T19495] ? preempt_schedule+0xd9/0xe0 [ 661.061215][T19495] ? __might_sleep+0xc0/0xc0 [ 661.065817][T19495] ? tick_nohz_tick_stopped+0x77/0xb0 [ 661.071209][T19495] ? irq_work_queue+0xc6/0x150 [ 661.075989][T19495] __mutex_lock_common+0x1da/0x25a0 [ 661.081206][T19495] ? hfsplus_file_truncate+0x864/0xb80 [ 661.086858][T19495] ? hfsplus_free_extents+0x186/0xae0 [ 661.092266][T19495] ? hfsplus_file_truncate+0x864/0xb80 [ 661.097739][T19495] ? panic+0x860/0x860 [ 661.101837][T19495] ? mutex_lock_io_nested+0x60/0x60 [ 661.107062][T19495] ? hfsplus_free_extents+0x47e/0xae0 [ 661.112455][T19495] mutex_lock_nested+0x17/0x20 [ 661.117233][T19495] hfsplus_file_truncate+0x864/0xb80 [ 661.122542][T19495] ? hfsplus_add_extent+0x880/0x880 [ 661.127756][T19495] ? mutex_lock_io_nested+0x60/0x60 [ 661.132979][T19495] hfsplus_delete_inode+0x170/0x220 [ 661.138215][T19495] hfsplus_unlink+0x50d/0x7f0 [ 661.142913][T19495] ? read_lock_is_recursive+0x10/0x10 [ 661.148308][T19495] ? hfsplus_link+0x840/0x840 [ 661.153003][T19495] ? clear_nonspinnable+0x60/0x60 [ 661.158051][T19495] ? bpf_lsm_inode_unlink+0x5/0x10 [ 661.163180][T19495] ? security_inode_unlink+0xca/0x110 [ 661.168575][T19495] vfs_unlink+0x359/0x5f0 [ 661.172926][T19495] do_unlinkat+0x4a3/0x950 [ 661.177357][T19495] ? fsnotify_link_count+0xf0/0xf0 [ 661.182601][T19495] ? strncpy_from_user+0x209/0x370 [ 661.187745][T19495] __x64_sys_unlink+0x45/0x50 [ 661.192436][T19495] do_syscall_64+0x3b/0xb0 [ 661.196868][T19495] ? clear_bhb_loop+0x15/0x70 [ 661.201569][T19495] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 661.207478][T19495] RIP: 0033:0x7f1a9baf99b9 [ 661.211487][ T8969] usb 4-1: Using ep0 maxpacket: 32 [ 661.211898][T19495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.236613][T19495] RSP: 002b:00007f1a99f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 661.245056][T19495] RAX: ffffffffffffffda RBX: 00007f1a9bc95f80 RCX: 00007f1a9baf99b9 [ 661.253137][T19495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 661.261119][T19495] RBP: 00007f1a9bb678d8 R08: 0000000000000000 R09: 0000000000000000 [ 661.269106][T19495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.277091][T19495] R13: 0000000000000000 R14: 00007f1a9bc95f80 R15: 00007ffc23e34cb8 [ 661.285087][T19495] [ 661.343161][ T3617] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 661.352465][ T8969] usb 4-1: config 0 interface 0 has no altsetting 0 [ 661.363831][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.372933][ T3617] usb 2-1: Product: syz [ 661.377181][ T3617] usb 2-1: Manufacturer: syz [ 661.381936][ T3617] usb 2-1: SerialNumber: syz [ 661.402753][ T3617] r8152-cfgselector 2-1: config 0 descriptor?? [ 661.521524][ T8969] usb 4-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=1e.0b [ 661.535253][ T8969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.543870][ T8969] usb 4-1: Product: syz [ 661.548136][ T8969] usb 4-1: Manufacturer: syz [ 661.552790][ T8969] usb 4-1: SerialNumber: syz [ 661.568384][ T8969] usb 4-1: config 0 descriptor?? [ 661.610940][ T8969] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 661.621923][ T8969] usb 4-1: selecting invalid altsetting 0 [ 661.627867][ T2148] pvrusb2: Invalid write control endpoint [ 661.677578][ T2148] pvrusb2: Invalid write control endpoint [ 661.684266][ T2148] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 661.694626][ T2148] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 661.702243][ T2148] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 661.713139][ T2148] pvrusb2: Device being rendered inoperable [ 661.719419][ T2148] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 661.726970][ T2148] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 661.742026][ T2148] pvrusb2: Attached sub-driver cx25840 [ 661.764902][ T2148] pvrusb2: Attempted to execute control transfer when device not ok [ 661.773226][ T2148] pvrusb2: Attempted to execute control transfer when device not ok [ 661.781666][ T2148] pvrusb2: Attempted to execute control transfer when device not ok [ 661.790722][ T2148] pvrusb2: Attempted to execute control transfer when device not ok [ 661.798809][ T2148] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 661.869177][ T2148] TUNER: Unable to find symbol tda829x_probe() [ 661.908648][ T2148] DVB: Unable to find symbol tda9887_attach() [ 661.916096][ T2148] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 661.923289][ T3617] r8152-cfgselector 2-1: Unknown version 0x0000 [ 661.933559][ T3617] r8152-cfgselector 2-1: bad CDC descriptors [ 661.936623][ T2148] pvrusb2: Attached sub-driver tuner [ 661.944952][ T2148] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 661.970399][ T3617] r8152-cfgselector 2-1: Unknown version 0x0000 [ 661.979452][ T2148] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 661.991423][ T3617] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 662.079777][ T8969] usb 4-1: USB disconnect, device number 4